I already have a huge list of IP blocks stopped at the firewall but these hackers/spammers/botnets just pop (no pun intended) up in another country and carry on.

I am hoping if SurgeMail is not listening for POP that the bots will stop trying if they get no response. But that may be wishful thinking. At least I won't have a huge pile of entries in the login_failed log ...

Neil

Block it at the firewall

Wayne

On 25 January 2017 at 18:04, Neil Herber (nospam) <nospam@eton.ca> wrote:

My server is getting hammered by POP login attempts.

I want to force all my real clients to use SSL IMAP only. What settings do I need to:

1) force authenticated SSL logins for IMAP

2) completely ignore any POP logins (or force SSL if ignoring is a bad idea)

3) force authenticated SSL logins for SMTP

Any other suggestions to get rid of these pests welcome.

Note: I thought I had already set things up to force SSL, but I keep getting these failed log messages:

25 10:49:03.66:6852: xx-client-xx: pop: SSL required for ip (115.211.174.66) xx-client-xx

Neil

--
Neil Herber

--
Neil Herber